hxxp://youtube[.]com

Analysis

user interaction
yes
max time kernel
18s
max time network
19s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/07/2026, 01:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube.com
Sample260719-bf7cmsbv9y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3800	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288967899976215"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{4DEEAE07-A714-4DB9-97F1-877402EBF659}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{AA3407E9-10F1-4284-9DF5-B4C681572DCC}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3184 wrote to memory of 4396	3184	msedge.exe	86
PID 3184 wrote to memory of 3800	3184	msedge.exe	87
PID 3184 wrote to memory of 3984	3184	msedge.exe	88
PID 3184 wrote to memory of 3984	3184	msedge.exe	88
PID 3184 wrote to memory of 3984	3184	msedge.exe	88
PID 3184 wrote to memory of 2876	3184	msedge.exe	89
PID 3184 wrote to memory of 2876	3184	msedge.exe	89
PID 3184 wrote to memory of 1796	3184	msedge.exe	90
PID 3184 wrote to memory of 1796	3184	msedge.exe	90
PID 3184 wrote to memory of 640	3184	msedge.exe	91
PID 3184 wrote to memory of 1796	3184	msedge.exe	90
PID 3184 wrote to memory of 640	3184	msedge.exe	91
PID 3184 wrote to memory of 640	3184	msedge.exe	91
PID 3184 wrote to memory of 3680	3184	msedge.exe	92
PID 3184 wrote to memory of 3564	3184	msedge.exe	93
PID 3184 wrote to memory of 3680	3184	msedge.exe	92
PID 3184 wrote to memory of 3680	3184	msedge.exe	92
PID 3184 wrote to memory of 3564	3184	msedge.exe	93
PID 3184 wrote to memory of 3564	3184	msedge.exe	93
PID 3184 wrote to memory of 6032	3184	msedge.exe	97
PID 3184 wrote to memory of 6032	3184	msedge.exe	97
PID 3184 wrote to memory of 6032	3184	msedge.exe	97
PID 3184 wrote to memory of 800	3184	msedge.exe	98
PID 3184 wrote to memory of 800	3184	msedge.exe	98
PID 3184 wrote to memory of 800	3184	msedge.exe	98
PID 3184 wrote to memory of 1808	3184	msedge.exe	99
PID 3184 wrote to memory of 6044	3184	msedge.exe	100
PID 3184 wrote to memory of 1808	3184	msedge.exe	99
PID 3184 wrote to memory of 6044	3184	msedge.exe	100
PID 3184 wrote to memory of 804	3184	msedge.exe	101
PID 3184 wrote to memory of 804	3184	msedge.exe	101
PID 3184 wrote to memory of 216	3184	msedge.exe	102
PID 3184 wrote to memory of 2744	3184	msedge.exe	103
PID 3184 wrote to memory of 2744	3184	msedge.exe	103
PID 3184 wrote to memory of 3440	3184	msedge.exe	105

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2bc,0x7ffb32f3c188,0x7ffb32f3c194,0x7ffb32f3c1a0
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,15765091884275883881,4013275094295155186,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,18186252700156991493,10592707131645760259,262144 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,3577073327486857348,17198253265737267977,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,1978361966515413318,291074351876110960,2097152 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,3064168750436002420,17816734013391084444,2097152 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,15063755976940195857,10293335958685525801,2097152 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,13369895696460557451,15342210206423061299,2097152 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:2
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5060,i,2328747764014875553,10326778337413057053,2097152 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5224,i,5807161812280257072,11650905850274553686,2097152 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,14046257873405896460,7127888977652207530,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,12604914228000940573,10983910019849595920,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,10096640787096071065,8533149305489442046,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,12578687245720658350,9974781707090968251,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  - Modifies registry class
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,1490825903464335764,13047728809859857141,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,10757457015315695212,11605357720257306648,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,10757457015315695212,11605357720257306648,524288 --field-trial-handle=2304,i,2851982752327499421,11534973133717037929,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  PID:3440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 56KB
SHA256 3f9b0c0a209ecaa2f816817bd374578d8ca9acbd0b1de8a110dfddf3c81435a5
MD5 74c2ec4bb46698ce9fddc0e5b0cbfcf9
SHA1 9692779807193c6df10eeb1151f533c670455f36
SHA512 a442dbbac7d346af3e65f78b11802953c38c63b2fbff4c413ac530d2972a1083218b115cc2a471ea5341730d09afc9da395deec45f97a989c8097c0382979a39
SSDEEP 1536:sgBxpaRRlGtjocgEAuoJl4/I4s3yvxs6Kk7C1UveOJ:saapGXADl8LdJake1UvH
TLSH
T11743F17BBE71F6DDE24201C25D132D6407129500B521A9C0EADAD7BE1B2D13377EA727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 663KB
SHA256 fc977f4cec1ba24fd68bd6706ff9d1e8288a45c27455d4109ffae8449370a799
MD5 ea93c9fcf05c0c81ef4696e33d16a910
SHA1 087718f4d113550722e53193ec5d0dfbae6740c7
SHA512 79463fa6c7c3d78c9b1a72162a4a7342737a0b5fcf9f9ce3ba5be5b7d07be6c06e7af22ec58968e113f98a6ae5e1c917b2d09a73be09d0b4a731993b899f170e
SSDEEP 12288:4ifou6G3ECpbj7VO5qC5TzNNcWPIa+84ZhPTYixYyWVn6HydlwwQ3gLi3vZ:4U9DDfbILPx+84nPTNYyWVn6Sk3YKvZ
TLSH
T1AAE43394BC0FDEA977799C7D2C17B1EBC6BE6C07048C91585AC887F2E23A040D539E66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 22KB
SHA256 dcfb114bdb494db3f15f8892c6bdb9b0832facba50d86987ba7a3e26eccf97a1
MD5 e374c3847560cb78118af7b31ff9f8f1
SHA1 091bfdcc26ec4843be222e7bb1212efddd4e5abd
SHA512 871113f46e9ff03df44f7bdc8955a9158f816470f1bdbefc30d66036c1f70fb8348fea1668987c33e1ce886b4f2576892e22f969120490334acb687f71064218
SSDEEP 384:OHY+6/A9ZuVOc86S2fRA8FUFHuJtByB68XHZ/dY9LBHcZNi1yWQQPc6mo3YC3ipb:OH7Zu8HgRAqUFHwgT89LBqisAFmo3YC0
TLSH
T143B2E10ADCE9760F60A5B54EFE2EAA48E3C35E97F1EC705E130ED145988C8F6B315948
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 34KB
SHA256 0e679158993867a8ae64e76308818210dbbb4b73d4f9372fb1d7662a21f7ee72
MD5 a3ccf2f3e51535ab36ef2ed58ab7b5f9
SHA1 d805c2a52a176f5c8cf1fbb0a374aca4a02c7819
SHA512 3b7753d21400fbba02d1cb38523f6d8ce1be67f67c1af7a0afa1a11dea0c0c861fb5ac9a2376f66bc440d9a3e84bcc816ed727a0e9fd2705269c2335afd8470e
SSDEEP 768:HDOHJsSO+mmuptIxa0wBFs9LNs/cCIq4foLuf8T5H/qg5J3KY/zQfa/h/fMRNBQ:HDOJR9mm6ww+NYcCIYB1i3Yl5/Ag
TLSH
T108F2F177D30E4EC46264BCE61FE968F39F16D105A70E850F363419B75EA1B26843790A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 275KB
SHA256 38616e03510afd2f23d60376ab377670f9df7d6df3cc1ed788500f1d1598ceb2
MD5 721cbe24c2e0d7f88a3ed8fb320e3202
SHA1 56d7d33b2221a5ee0112ff898d86953817a132b2
SHA512 b82e0bc6d6dddb7449338d7ec315570e26f08c773e541ff62e598aefc72b8deda5be889be8fadd2f9512f453701ddc3d788a86e15971228b9e9cf276a905dfee
SSDEEP 6144:CUYInrfflcBV5SWbazAhH8Z+id04/lmtxHUEr0yg8P7H9Ysq:jnrfflcBV5RbazAFsV0zx685Ysq
TLSH
T12854233EC5708A512CDDA50542D1AA2D1EC65A2CF25B71FC029F1AF36A323BCE5D7742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
Size 6KB
SHA256 f9e5cdd933ff6da56a05d1a0636ff7a88ca7a336c6e3f6141e649049ea894785
MD5 bc90dff7eea3a1e9e20957f2a0360656
SHA1 56445961253a4f7db7462a7cadfd62dc538ee9c9
SHA512 e1753e1934c20737107eaebb83ba785c47d95a683b05eb244e5292e01f5653c2be8a23da010f4605e7f2686a95afa7caaadc3f65db15212f4250274c9247c4c9
SSDEEP 96:cJioM3W6OjpRgrOI1x+qlMPrsvmB2dJZu/jL99uJ5nRQBSwqWgi2s4Y9cR:nyvlq4w+oWL9iyswqvih46cR
TLSH
T118E17C7A57DD8456C93E6BF391FD010E9131760D2AC2E98EA302B24E484B533BA0D90D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000009.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000009.log
Size 41KB
SHA256 663b3f49f89daa6d2feefa75b92ea5312091c6e18708ea7684ce5d655c1818ef
MD5 ffad0adb4a41eca802826e51f275d49e
SHA1 0dd69f326cd34774e8340761143cc2fc751c42f5
SHA512 5782ae1c9fea4297d3d72f2f9fb51e23c4f4070093199e778d386b0fe45a450f37aba94bf9049a162682cf843950909130d02cb84bd08c26fee6a821a8bc1402
SSDEEP 384:6nV07u3iHloQkpSdlLUi76nc4o3V38hkpDCkpUxVLUi76hLUk76jmQvn4jLTLC45:6ydHlLB2zo3V38huC9xrmQv4jHeM
TLSH
T10113322F41D58AC7CB15C1F1496D0B5A5F392C4638E860EFF08A7A1EF53B2A02B71D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 12KB
SHA256 b1b5a683b1985ebc1c92871b218049126d4e73733a73ab463f38a3b7b7a6b808
MD5 c6c6592c1c0e4fb1d5a69ea85d3a63b5
SHA1 4d6a68558a3582e2dd99b3ea11b310f5246b60ed
SHA512 e2fdf39cd7ae9dd2b5535c5d4bbac4aad21f37ac5f0ed4ae56e35947fba822fd08dfc8ed481caaddc5e792a7c6cd51debd59cb23bac5e561495e5616caf53cad
SSDEEP 192:Yq393zrVF+m3bSeESnu6PY+xC2iKx5YvCYv9bkB/y4c9fvMQ7kTpJeqsJCgqtG0x:5393z5kmrPujmx5w4ABKJeqeIXYI
TLSH
T18D42AF973AE9C4DBD0B2613EB8F627882F127C0A3285D4CD9AD7110C1D7699B29B5F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 3KB
SHA256 95b5b5e37eac091bd580482815e2e5cc99852609c2e497423a9785420c1416b9
MD5 4097b6f8d8ee4ce657066f6ad9f7ffb3
SHA1 dc3dc2fd53f5aecaea4d1e63563bed48eb333dc7
SHA512 72cd097b0c553afec4b3d7022427cbd2bcc65e2d104e9a3139092ea1c4988d971985c8b528f00712d39df5b792665a63269e93568278f40571419770c48177ea
TLSH
T1E8717FEF0609D8B540C6C162C5B8F1EADCD89A52964C6F14A9CCA7DF07E100FE79A1A9
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 552B
SHA256 94e3d3f28f952c5016266aee466ec1a47f78c1149b6cc5084f230af517627003
MD5 90feb63a9ec60676e0a185a90fa7495e
SHA1 bdee5e17fa5de58b37f0c8c0a74f16abdc77ff61
SHA512 18f54dc8addb9577a4ea32eba6ef6683841948a03e04fd5e5f2bdb854aa803ef9fce1c726438f3d098165a616312a0e7220c0fb5272b0c0cd1ce3547d451653d
TLSH
T1F0F02411FFE2959AF4B518F569BBBA46B222749E2C23E21F5005814A51E360A4C3033F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3b76e5f5fadac7417b75c476cc80549796753c38f20188151957e938709cafb2
MD5 10245c1eb491fb1ca49be0633e0da871
SHA1 82eb62271000b6c5c770c4c11429967a9377a945
SHA512 249d1ea8573eeb711c0e7105bfeaf80e61f7dc3a7b5d94be3b25d4857ecb4f863db430aaf500e0888d622677795ae7560464fb3fb092ec17a5328684cca5a5d1
SSDEEP 192:sxZ4RWyM/jK1Ml8Mky/fisSjA8Idp0d5yk2HW6+WNn6A/YHnpDLIgrJ:sxZ4YMy/fisSjAlHjHbx/a9
TLSH
T1BF52E9526A349A77CCCBD209F951BB53E6F54476E2900E54AAFCCA0C05E6BED6203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 52d41af9fee1bee392ca41751000e416639aae8e7d93cfd2b5daaa2724b72063
MD5 eb97140eeaabf8398ed333d4fe16be51
SHA1 73cebbb249880edcf4e47ac469d84ea198338a9e
SHA512 4ec28c26ebab1eb3576b52622cb9bc3a2f56d544c436bd5af8302cbb7d967b6351e2d2a2008dc99ca7fcf3f918a3434905026745311011a482a5284ba5a822e5
SSDEEP 768:j+UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RAroVR06u:j+UZYTMWvg0Pou1ja7eLZmRLsh
TLSH
T14BD20A3B280CCB7E4F844E9DEC2A6F867DD801CB5A984D5447EA894C03CB2EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0176b5e0-e841-4a52-8123-8f462e828110\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9b0082c5-d738-4d65-a2db-a78427bad3a6\index-dir\the-real-index
Size 2KB
SHA256 2f20efcc792da7e721f52b7a358e379ecab8bdde21a8003024f134f474167307
MD5 1436c08fa5c6bfbfd14f3e931eb4a52f
SHA1 e540648764becc1d87d4b6ecf2ffab03edd7c346
SHA512 bc34653953704eb60e42ffadf58200d8b17033956094dc4ae787c4570bcb388d39f26033849bb2357d5be11f95534c8fa001890bc71c58325aec6558def67e98
TLSH
T18241448CC880A7ADEC7551BE2D9815F657752D38FC58C2924594B1B13403AA81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe583340.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9b0082c5-d738-4d65-a2db-a78427bad3a6\index-dir\the-real-index~RFe583340.TMP
Size 48B
SHA256 4c3d89ac93dcc08908e2f56e14cfdcf0725cadd30814e1de250df7786f2fd42f
MD5 2ccf7f7f8f9491c2d706be48be0a1d77
SHA1 c8b3f143d888fb4823721cd916f88390ae789600
SHA512 a31c7a664364dc8702d9b6d8fd650bee28f2d1a1f23664943e39f766e85f904191e4fd3fa39ac86b3cf40e7b2fb8d9c30e8a6f0a4e0c032d251ea70f689215b9
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 6c333ef4b97237e4c0e3ce96d9c32257ab27755d2010606f5c1fc05a0ec7a0b0
MD5 a7252ede974b2fd0c96f7a059a77b863
SHA1 772db54ec4adbce83818e4dcaf0a3c36a0363e6f
SHA512 d8c2b23f371461f7052493d7e79917d76a91e184398d0e758dacb54ac32a9349b4640649b3ec5d37ff0d5a9377b8303b2f529c97b93ccb41b14266b55da21935
TLSH
T1F1D023E68D30AB952B30DBE45138124F410B8D54ECC8CCF8D80DB003307CB03C551965
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 be77b02e7a92178bc03cc9eb080cdc328696cc1e5c71291848cf8f3c532c9625
MD5 d6376b820c4cc1ac05cadebed36f693b
SHA1 4f8f7362b061060676b028e728aff32f6c94dad4
SHA512 4b94e90b13b7a6beab2297febc1b5acd057326271ff656dfbc908d1386b1bf94ef5a3cd7b65f964e18eef8b3eece4bc5d3696d4e481d8306b971c4949a5d5bf8
TLSH
T13AD022E34930AAE24730DAD83938334EA00B8E06ECCAECD08C05B05321B8B43C460928
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 3238e39083ec3fec2096f7902cc639591e15c2ac9e3b67898409046cf4980d56
MD5 31c63f45d074f3cbf3c917de57b603c8
SHA1 5e93436d859ce76b3ffb162bb90b7439ab2cc18e
SHA512 f190f7021b01580f3df0320708b54f7d8bd3b64abbc2b00a229b6870bde16295d17161a95616e09439d8c240d39a3f11038573e83d21e0945da5723d94a53edd
TLSH
T1AFC09BF34C1097D64B30DAD83539775D950F414898D4DCE4D409A0032275E534551D25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 5aa9fc8b4ab93a454a02ce00f1a9a5a303f68945b9abe7f0ff6642aac1c23d5b
MD5 b8303b38df0d84be22a4426e58fdeed6
SHA1 8b30ee420675859326c3e945d03f1ce3834f302f
SHA512 3ba73ce9870345ba3947269d365e1697de639c7f2fc0ef1b63b89ab499758f2a3688773687bde64c76dfff22375344151d93247d140fda1d858961b383d6b11e
TLSH
T159C09BF35C1097D64B34DED42139635D950F414898D8DCE4D00DB0022035E534551D25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 7573338e7f037ff4e60a9277912f48f62ec26a16bd137f8741b5c22a9a17fe38
MD5 80b51753a060fdbf2765bed2c32a1614
SHA1 70df11e19299f4deddb6b20742e5c90b7f611f7d
SHA512 c21c70493fdaae0ee05d244cd8f4d1e4931169f7dcbaeeff82a8b96ee171b90cad62a9c8dc9b4eb3d168f0672e33cd1222124d5de86e46a5a75d72a8eab8b857
TLSH
T109D0A7D36D90669547358DE83478B15D450F8D498CC5DCA85545701573B4A83C020D38
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe581008.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe581008.TMP
Size 137B
SHA256 d93a2970363d0998956a7100c4d800bbd3938c11cc068a6ecbabf9755cffb8b2
MD5 ec3c70da99c864778ea0b5cb16ef9d79
SHA1 ac74dec1c5d872353ee1f6980ebe35e394aff177
SHA512 e1fc7b1e66acbd854545d2daf54108873baa9b3d5bc37a4d5091778d1a37a8f5f2ff8870de196dc71cbbfffc8d54ff9992a272081f4bbbe8cb6dd63c1af6f6e4
TLSH
T1CCC09BF34C2457D64B31D9D42139634D951F4D499CC4DCE4D00AB0423034E538565D25
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 94fe62b13a52fc51e07d8d9dd40b7d8acfe577dc27bb9b955a48cb8dea2bae4c
MD5 4937500c8ca5f5232fa9cce4d58aefe8
SHA1 111842e1cbdd40d19997e1e0270dd1165017f70c
SHA512 8f392d25a4e138c72856ef820beb438d673bcb6d37f1caaa41162b7979ed6ed02a510706d6402be1f924b7fe74e5e61b057a8035e7db199fa5ac1f464f568f2a
SSDEEP 96:KA1eK2AwZiKCsKHuz6OMEE+OUpl8u+KkL84+gmuRox+UKDKuaG8KLau:E0VFFjnJ
TLSH
T1A7D1F81672B602113C3D6A0C86E597A78EC272637018A46B7BED00B1DE66D21DFFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d6e17f0ef5217ac4477cda233288501a0191da1d439b11b5726f1318f7c557c4
MD5 c230159c2b862ae382bffbc462880aa2
SHA1 91ee66f90708c8f37c92f2dd7ae7a5532e5492c6
SHA512 606bfa9cb3c4ef688116f7a20ab8a897ca95b548602092d04ce3aeb9d002ae6343f1b08d2d3bee8cf9c852a46008961e1e34a59b916bfc1d17296ba4f98f1a28
SSDEEP 192:yONL61VWQmiUyWcgGX5Obd+j1jzorykaoX/aAR315U6:yONL6WggGX5od+V8ykVCAL5U6
TLSH
T14202D935A8686CB78EE2AE4AB48737135F95106BEA552F84D6FC1B1C00D769C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 898776b001dfd37385da054f7eb510c75328fcb905ac13b356233b6855a99265
MD5 4cea5d6b0378e31048224d35cac84df6
SHA1 1cffc42d0173a698cd2d3fac31fc6a374eb645af
SHA512 078d8ac078edae57b18cb639209aa079a0c45fa9423d571d2ded35bbab9966f91ba42aecc86aebc9b726ffcded1d1cb7204a513620f2f34ebc4714b505c9f3a5
SSDEEP 192:4ONF616WQmiUyScxGX5Obd+j1jzorykaoVX9ySJrOQjJAlqTU6:4ONF6P+xGX5od+V8ykVVX9tJrOoASU6
TLSH
T1D4120832A468AC7B5EE2B585B48731539FA95127EB496F80D6FC2B1C01EB59C130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 336885ffef8803619a22ef24838c8c29736474e55d32837700227edb6a1f1977
MD5 d2896b8a0c7600ef1c92bb553cbf99fc
SHA1 1593ce9d0c6c5600224b607c9d63b8b466c13a83
SHA512 e49fad29cf2b7915c4648da7d31629c2f0c58ea6855eaa33658ddeb36bbeb1f2fa9d98703d4f45926ceeccea40e95c0f2b06bbf94ca7599f7b526591703bbb59
SSDEEP 384:ctNn/s3n9SfsNsWfuiYDI6PjzX5od+V8ykVVX9tJrOEASOObjI9G6w7Y:cj+9UwKnOD1/hOEAS29MY
TLSH
T17D929D326828AE775ED3E199F08B36179FF8516B97842FC4D2FC6F0C01DA5AC4316926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b837bf5b69dbb7ddd15ffcf5643ea6ed93a4cbb0b820088074ffc769c0902677
MD5 cc6f00d90efe47ff3677d32452919c92
SHA1 0405d96fcbdd9dfbbcc0b68bacc971e9846d9e1a
SHA512 efc88f1e1483ceac902ff01ea15dde9626b550a5baa86a975fb6012f297ef69e2ec9bac730da47242c9136250d9493550aa46b6f2620feda5799bc61e6694612
TLSH
T1F9412958B6FA1109B3B77F1A9BF3A86E447ABC771E06946E00110D4F0A76B40D971737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3440-626-0x00000183836F0000-0x0000018383839000-memory.dmp

Download

memory/3440-702-0x00000183836F0000-0x0000018383839000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads